
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
File: avg9FyUOFuw4duVnrj4dq4MlHAY.mft (raw, json)
Hash identifier: 1GHwyRpFUXIuJ+dfo+c/iQuXUlhRxrCgkIaVCJVG5DI=
Subject key identifier: A7:1D:F1:5C:8D:A6:09:EC:35:6F:32:3E:BB:DA:57:0D:AC:B7:6C:70
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Certificate issuer: /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
Manifest number: D8
Signing time: Sun 05 Apr 2026 06:05:54 +0000
Manifest this update: Sun 05 Apr 2026 06:05:54 +0000
Manifest next update: Sun 12 Apr 2026 06:05:54 +0000
Files and hashes: 1: avg9FyUOFuw4duVnrj4dq4MlHAY.crl (hash: ti2lN3/PvQruC0v3Qs3b/fJSxojaKfd43Ud69JjzMs0=)
2: DC0082F6EE1F11EF9191EE31C4F9AE02.roa (hash: RfHLlcRz+bkkiNXL85ejvAqK1QMc4Bz6mAhB2a1qIb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B02, serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Validity
Not Before: Apr 5 06:05:54 2026 GMT
Not After : Apr 12 06:05:54 2026 GMT
Subject: CN=69d1fbc2-c5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:a2:5a:6d:77:aa:97:01:ba:c3:18:da:55:
74:bd:41:05:e9:7e:2e:e4:a0:64:a1:fb:96:79:10:
46:49:32:73:b5:1e:4b:ed:a5:05:4f:c1:36:d2:37:
a6:06:75:3a:6b:a4:2f:9a:80:ce:c8:92:e7:a5:5c:
2e:94:12:51:e7:df:81:55:64:4a:85:ae:32:91:5b:
07:96:f5:3d:c4:e0:bf:74:ab:e5:72:08:60:d9:0a:
36:99:11:3f:0f:ee:9b:9a:14:ed:c7:9f:eb:6c:ad:
05:c9:6c:13:c8:c0:9f:b0:13:1a:b5:d9:03:95:69:
17:50:6b:93:6a:df:94:bf:32:8e:c2:57:ed:a0:eb:
d9:98:79:17:3f:df:40:90:2d:ab:ac:47:80:e6:2a:
75:fd:99:52:4a:7d:a7:dc:09:86:10:0f:78:2f:cc:
ae:41:67:f8:3e:f5:b5:92:83:28:7b:be:46:b7:2e:
f5:90:8a:bb:76:93:a6:3f:cc:ff:af:3f:30:b7:fe:
d9:e1:8d:db:4f:d5:59:74:0f:52:b0:ad:43:c9:97:
27:f0:b8:ce:21:1e:1d:d2:03:19:c8:d5:cf:ba:af:
c3:ff:65:15:29:84:86:d5:86:fd:09:dd:48:aa:dd:
58:ae:df:09:c2:a7:4f:14:ae:c3:4e:f8:4e:64:bf:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:F1:5C:8D:A6:09:EC:35:6F:32:3E:BB:DA:57:0D:AC:B7:6C:70
X509v3 Authority Key Identifier:
keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:3f:bb:f6:26:a4:b9:a4:cf:b0:76:eb:15:b0:a7:c8:50:b1:
c2:80:04:95:1f:76:32:12:62:29:3c:e2:35:23:56:e5:62:0c:
8d:21:aa:eb:f7:f1:f8:63:77:d5:87:ed:7b:7d:ce:c6:77:5a:
9b:1a:c1:32:79:55:c2:56:3d:02:ae:18:50:75:9c:6e:86:41:
a2:2b:f5:37:78:8c:32:e7:76:d1:2a:9b:da:c1:64:94:f4:30:
e7:ce:84:a3:88:f9:71:94:51:57:50:63:13:67:17:82:c3:58:
a0:90:aa:96:5f:1c:1d:29:84:d4:b5:c4:fe:b4:e4:62:ee:4b:
f6:27:23:8a:de:9b:a5:2b:70:16:1f:02:f3:33:1e:e7:11:a6:
c8:62:0f:18:9e:7b:f1:d9:6d:c7:19:d6:d2:4e:14:60:10:dc:
6c:31:f4:34:23:7d:ee:7d:63:09:a8:38:39:03:09:00:5c:60:
6a:e1:3a:45:9a:69:89:5e:c3:bd:df:7f:43:21:eb:b3:31:c8:
02:2d:f2:98:b7:d0:b2:52:e7:38:c3:51:ca:a6:8e:2b:92:98:
85:bf:5a:17:79:8d:11:76:33:63:8b:59:b1:1a:b0:dd:72:f3:
69:d9:28:34:6a:15:7b:ed:96:67:e2:7e:df:94:20:22:b7:0c:
4c:38:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:47 2026 by rpki-client